Privacy policy

Privacy Policy

1. Data Controller

Cuentos Colorín, S.L., a company with registered office at Calle Ríos Rosas, 36, 1º Izquierda, 28003, Madrid, Spain, Tax ID No. B87210621 (hereinafter, “Cuentos Colorín” or the “Company”), is the controller of your personal data.

This Privacy Policy provides information on the processing of personal data of our customers or potential customers, job applicants, or social media users who interact with us, in accordance with the General Data Protection Regulation (“GDPR”).

You may contact us at info@mumablue.com if you have any questions regarding this Privacy Policy. If you wish, you may also request a list of data recipients at the same email address.

2. Processing of Customer Data

If you are a customer of Cuentos Colorín because you have purchased or intend to purchase any of our products, we will process your data as follows:

Purpose of processing
We process your personal data and the identifying data of the child who is the protagonist of the story you provide in order to manage, fulfill, develop, monitor, and execute the commercial relationship we maintain with you as a customer of Cuentos Colorín.
Additionally, we may send you marketing communications about our products and services to keep you informed about news and offers, taking into account your preferences, interests, and/or browsing behavior.

Legal basis
The processing of your data and the data of the child protagonist is necessary to perform our contractual relationship (for example, order management, delivery to your chosen address, or personalization of the book).
Regarding marketing communications, Cuentos Colorín has a legitimate interest in maintaining contact with you to inform you about updates that may be of interest to you.

Recipients of your data
Only certain technology or logistics service providers will have access to your personal data and the data of the child protagonist, strictly as necessary to provide their services (e.g., shipping companies that require your delivery address, or printing companies that require the book content, including the child’s first name and avatar).
These service providers process your data under our instructions and authority.

International data transfers
To provide our services, we use technology providers (and logistics providers if your delivery address is outside the European Union) that may access your personal data from the United States, always under our instructions.
These providers adhere to the Privacy Shield framework, under which participating U.S. entities guarantee data protection standards equivalent to those of the European Union. You may request an updated list of these providers by emailing info@mumablue.com.

Additionally, Mumablue, Inc., a company within our corporate group, may access your personal data if your order is shipped outside the European Union. Standard contractual clauses approved by the European Commission have been executed with this company in accordance with Article 46.2 of the GDPR. You may request a copy of these clauses by emailing info@mumablue.com.

Data retention period
Your data will be retained for the duration of our contractual relationship.
Marketing-related data will be retained for as long as you wish, as you may unsubscribe at any time using the link included in each marketing communication. If you do not interact with our marketing emails for 18 months (interaction meaning opening the email), your data will be deleted for this purpose.

3. Processing of Data of Potential Customers for Marketing Purposes

If you are not yet a customer but wish to receive marketing communications, your data will be processed as follows:

Purpose of processing
To keep you informed about news, offers, campaigns, and product launches based on your interests and browsing behavior.

Legal basis
Your explicit consent, provided by checking the corresponding consent box.

Recipients of your data
Only certain technology service providers may access your data under our instructions and authority.

International data transfers
Your data may be accessed from the United States by technology providers adhering to the Privacy Shield framework. You may request an updated list by emailing info@mumablue.com.

Data retention period
Your data will be retained until you request to stop receiving communications. If there is no interaction with marketing emails for 18 months, your data will be deleted.

4. Processing of Data Through the Contact Form

If you contact Cuentos Colorín with a question:

Purpose of processing
To respond to your inquiry.

Legal basis
Our legitimate interest in responding to user inquiries.

Recipients of your data
Only certain technology service providers acting under our instructions.

International data transfers
Data may be accessed from the United States by providers adhering to the Privacy Shield framework.

Data retention period
Your data will be retained until your inquiry has been resolved.

5. Processing of Job Applicant Data (“Work With Us” Form)

If you apply for a job and submit your résumé:

Purpose of processing
To evaluate your current or future candidacy.

Legal basis
Your explicit consent.

Recipients of your data
Only certain technology service providers acting under our instructions.

International data transfers
Data may be accessed from the United States by providers adhering to the Privacy Shield framework.

Data retention period
Your data will be retained for one year from submission.

6. Processing of Data of Social Media Users

If you interact with Cuentos Colorín on social media:

Purpose of processing
To interact with you in accordance with the normal operation and policies of each social media platform and to manage our online communities.

Legal basis
Our legitimate interest in engaging with users on social media.

Recipients of your data
No third parties will access your social media data through Cuentos Colorín.

Data retention period
Data will be retained only for the duration of the interaction. Please note that social networks may retain data according to their own policies.

7. Processing of Data of Supplier Representatives

If you are a representative or contact person of a supplier:

Purpose of processing
To manage the commercial relationship with the supplier.

Legal basis
Our legitimate interest in maintaining business relationships.

Recipients of your data
Only certain technology service providers acting under our instructions.

International data transfers
Data may be accessed from the United States by providers adhering to the Privacy Shield framework.

Data retention period
Data will be retained for the duration of the contractual relationship.

8. Exercise of Your Rights

You may exercise the following rights:

  • Access to your personal data

  • Rectification of inaccurate data

  • Erasure of your data, where applicable

  • Restriction of processing

  • Objection to processing

  • Withdrawal of consent for marketing communications

  • Data portability

You may exercise your rights free of charge by emailing info@mumablue.com, specifying the right you wish to exercise and your identifying information. Additional information may be requested to verify your identity.

9. Voice Dedications Processing

If the customer purchases the Voice Dedication service offered by Mumablue, the following additional conditions shall apply:

Purpose of Processing
We process voice recordings provided by the customer for the purpose of creating, storing, managing, and playing back the voice dedication associated with the corresponding order, as well as enabling access to such dedication through the mechanisms made available by Mumablue.

Legal Basis for Processing
The processing of the voice recording is necessary for the performance of the contract and the provision of the service requested by the customer.

Recording Content
The customer represents and warrants that they have obtained all rights, authorizations, and consents necessary to record and share the voice contained in the dedication. The customer agrees not to upload or submit any content that is unlawful, offensive, defamatory, discriminatory, threatening, or that infringes upon the rights of any third party.

Use of the Recording
Voice recordings will be used exclusively for the provision of the contracted service and will not be used for biometric identification purposes, for the training of artificial intelligence systems, or for any advertising or commercial purposes unrelated to the provision of the service.

Data Recipients
Voice recordings may be processed by technology service providers engaged by Mumablue for the secure storage of audio files and the provision of the service. Such providers will process the recordings solely in accordance with Mumablue’s instructions and subject to the safeguards required under applicable law.

Access to the Voice Dedication
Voice dedications will only be accessible through the access mechanisms provided by Mumablue and may require order-related information for playback and access.

Retention Period
Voice recordings will be retained for as long as necessary to provide the contracted service and for the period required to address any incidents, claims, disputes, or requests relating to the order. Upon expiration of such period, the recordings may be securely deleted.

Right to Erasure
Customers may request the deletion of their voice dedication at any time, provided that such deletion does not prevent Mumablue from complying with applicable legal or contractual obligations.

If you believe that Cuentos Colorín has violated applicable data protection laws, please contact us at info@mumablue.com and provide details of your concerns so that we may address the issue as promptly as possible. You may also lodge a complaint with the competent data protection authority and seek protection of your rights through the applicable supervisory authority.

If you believe Cuentos Colorín has violated data protection laws, please contact us at info@mumablue.com so we can resolve the issue promptly. You may also file a complaint with the Spanish Data Protection Agency.